GHSA-7w8v-5fcq-pvqw

    Dashboard / Vulnerabilities / GHSA-7w8v-5fcq-pvqw

    GHSA-7w8v-5fcq-pvqw

    Published: 19 Oct 2023Last Modified: 16 Feb 2024

    Summary: Apache Shenyu Server Side Request Forgery vulnerability

    Details: There exists an SSRF (Server-Side Request Forgery) vulnerability located at the `/sandbox/proxyGateway` endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing. This issue affects Apache ShenYu: 2.5.1. Upgrade to Apache ShenYu 2.6.0 or apply patch  https://github.com/apache/shenyu/pull/4776  .

    References: https://nvd.nist.gov/vuln/detail/CVE-2023-25753, https://github.com/apache/shenyu/pull/4776, https://github.com/apache/shenyu, https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977d

    Affected packages

    Package

    Name: org.apache.shenyu:shenyu-admin

    Purl: pkg:maven/org.apache.shenyu/shenyu-admin

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -2.6.0

    Affected versions

    2.4.0
    2.4.1
    2.4.2
    2.4.3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-7w8v-5fcq-pvqw | CVE-DB